Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZAqiwHn96HpUUV0B3iG8LoXeExo.cer
File: ZAqiwHn96HpUUV0B3iG8LoXeExo.cer (raw, json)
Hash identifier: RS1/XrMbZybW/LMKRD+lzjsRC9B/V9W9rv9oPnkxhBQ=
Subject key identifier: 64:0A:A2:C0:79:FD:E8:7A:54:51:5D:01:DE:21:BC:2E:85:DE:13:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274829C169755D0032CA3E6BD916D26A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/ZAqiwHn96HpUUV0B3iG8LoXeExo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20742
IP: 185.143.48.0/22
IP: 2a02:a50::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:c1:69:75:5d:00:32:ca:3e:6b:d9:16:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=640aa2c079fde87a54515d01de21bc2e85de131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:45:2a:31:9b:ab:4c:a5:16:10:8c:b4:64:
f3:ea:34:cf:77:23:71:08:1b:58:ae:6c:a6:c3:67:
2e:70:d1:2a:00:ac:a6:12:07:d7:46:6a:e7:01:36:
3b:08:c8:30:ef:60:22:14:46:a9:90:f0:e1:b6:da:
02:21:5d:80:69:24:14:6d:ba:c5:dc:cc:cd:54:c5:
67:aa:9c:99:fb:41:fe:f8:49:2b:23:b8:df:53:00:
03:81:d8:07:fb:0b:1a:5c:c4:17:6e:48:f5:0d:d6:
09:f5:0c:cb:60:44:d1:e9:c1:cf:12:4b:c4:01:b6:
a6:bf:79:42:2f:3b:95:0a:c4:a9:4e:22:c8:6f:9f:
cf:a3:b8:9b:17:8b:17:42:b1:b0:62:b0:d3:82:bf:
06:77:3b:d7:66:23:2c:5f:3a:6f:e5:66:e3:02:bb:
bc:cb:8c:59:e5:1c:df:27:86:90:a9:98:ec:25:03:
11:39:65:80:f8:70:f1:2d:ae:8f:82:59:93:70:b2:
e6:db:ce:26:ff:73:84:11:18:06:91:45:5e:5b:3a:
5b:b8:59:f3:f9:d1:85:d0:53:17:2c:ac:1c:28:56:
91:4a:20:35:26:49:b7:dd:5c:e5:dd:13:a3:50:cc:
d9:01:71:a0:50:26:7a:0e:17:ab:1e:a6:dd:04:51:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:A2:C0:79:FD:E8:7A:54:51:5D:01:DE:21:BC:2E:85:DE:13:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/57784b-107a-42d9-a21d-3a98966f5e31/1/ZAqiwHn96HpUUV0B3iG8LoXeExo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.48.0/22
IPv6:
2a02:a50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20742
Signature Algorithm: sha256WithRSAEncryption
70:76:08:ce:33:26:6e:36:9d:6b:8c:8b:10:20:79:2e:ad:60:
34:3a:6c:9e:f7:41:2a:7e:fa:08:a6:20:89:99:fc:e7:8c:76:
5c:ff:0b:b5:08:a0:9f:f6:db:d8:2c:9b:91:d4:ae:b0:c3:88:
53:9d:bc:5f:fe:5b:84:0c:39:76:4c:c2:4c:20:63:06:e4:04:
75:41:9c:ed:54:8c:3c:4f:61:c8:3e:8c:b7:96:31:a0:63:cb:
1f:bb:4b:a9:4e:ea:f0:30:7c:b0:0f:a1:f2:26:59:15:bb:6f:
0b:a5:59:b4:42:4a:63:61:03:39:fb:cc:52:81:48:f8:cc:91:
31:b7:02:bb:e2:c0:96:b7:ea:38:5e:d5:07:3e:1d:ba:fa:a2:
14:9a:c1:77:c3:c3:85:94:36:17:09:1a:68:4e:7e:a3:a2:52:
48:8e:12:0c:ba:0f:48:f6:4d:6d:8f:a5:c0:f5:b4:2b:74:96:
2a:df:e4:6e:93:41:9d:79:aa:ad:93:e0:0f:43:c3:cb:ea:92:
df:ab:76:81:91:b4:cb:11:6b:eb:9b:60:9f:a0:63:62:23:e3:
d9:f7:a2:6e:35:58:e3:f4:e4:58:4a:68:7b:53:77:2c:ad:27:
e6:02:12:bb:54:94:6e:02:f5:0e:7a:a9:68:1e:e6:49:c7:be:
ca:3e:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:33 2025 by rpki-client